This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e38332e342e302f32322d3234203d3e203131303134.roa
File:                     3137302e38332e342e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          NV1btdj+chXMeswvmd+eFtdpfKp7RGMV6JVPFwtcj1o=
Subject key identifier:   93:08:ED:FC:40:79:B7:F1:AD:0A:83:BA:7A:FA:12:1C:6D:8C:36:2A
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       3726FCF13130BA0B791B34B71D7F0A0EEA37B99E
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e38332e342e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 06 Jan 2026 19:20:16 +0000
ROA not before:           Tue 06 Jan 2026 19:15:16 +0000
ROA not after:            Tue 05 Jan 2027 19:20:16 +0000
asID:                     11014
IP address blocks:        170.83.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:26:fc:f1:31:30:ba:0b:79:1b:34:b7:1d:7f:0a:0e:ea:37:b9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Jan  6 19:15:16 2026 GMT
            Not After : Jan  5 19:20:16 2027 GMT
        Subject: CN=9308EDFC4079B7F1AD0A83BA7AFA121C6D8C362A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:a3:e8:bc:c3:67:47:6e:d1:f6:99:e5:8f:
                    6f:b4:f1:f0:85:d3:69:0c:a7:2e:37:2c:bf:07:8e:
                    19:e0:ec:d4:03:13:71:14:1c:a7:ca:2b:f2:64:9e:
                    83:45:84:76:f6:c4:4f:d6:23:0f:ed:03:6a:2a:1f:
                    e9:52:39:54:40:ae:8c:36:6a:6d:d4:aa:f2:85:cc:
                    e9:8e:22:52:72:03:56:31:e4:8a:c4:8d:fe:27:30:
                    b0:3d:36:8c:5a:d3:c4:db:52:57:39:d2:62:65:d8:
                    76:97:93:c0:f0:e5:a8:d9:ca:7e:18:fc:86:83:a0:
                    c0:74:62:51:3a:fc:b4:35:72:95:47:3d:eb:95:61:
                    84:f7:f0:ce:d2:68:ac:fc:69:d7:f0:cc:71:a4:53:
                    7b:ab:33:f7:ca:c4:51:46:cf:fd:d0:bc:ad:a8:07:
                    17:f9:21:45:32:f6:13:32:87:ce:9b:35:fa:11:dc:
                    6c:e4:ff:b3:11:5f:db:a1:30:9c:04:4b:c2:ad:c8:
                    6a:b8:c7:b7:b7:86:cd:79:75:83:03:09:a2:b5:f4:
                    16:d5:2e:91:a1:03:a8:40:19:90:b2:55:f1:a7:6d:
                    f0:e6:e1:2c:5d:67:61:de:d2:51:3d:e6:48:1c:a5:
                    47:14:3d:da:9b:51:fb:5f:a3:88:14:b9:96:51:74:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:08:ED:FC:40:79:B7:F1:AD:0A:83:BA:7A:FA:12:1C:6D:8C:36:2A
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e38332e342e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:d1:88:3d:cf:17:fe:fa:c7:4a:b8:6a:c0:70:30:e6:90:84:
         86:46:d4:48:0c:0a:8f:6a:71:ab:1d:a1:c4:97:d1:e3:14:ef:
         32:67:b9:c8:65:35:7f:3c:41:ef:7a:fb:9c:e2:59:48:ca:f3:
         60:69:70:13:a8:39:8b:b4:ca:52:cb:39:30:44:c8:e5:bd:7d:
         ae:0b:6a:9c:b1:b6:17:e5:88:b9:a1:6a:7f:40:18:06:75:9f:
         2f:22:3b:33:af:b0:30:73:98:58:c9:b5:67:43:98:69:7a:6a:
         58:92:be:29:8e:f4:e6:38:bd:d5:ba:4d:38:4c:f2:96:d1:6a:
         f9:6e:01:1d:3a:df:8e:1d:1d:c4:aa:66:21:26:f7:72:11:64:
         df:be:30:93:71:be:de:e0:76:0b:91:f3:84:bc:78:3c:54:3e:
         48:c8:76:25:87:4d:df:65:b5:f8:94:4c:d5:d8:16:59:b1:da:
         5d:ce:d4:24:31:fe:85:16:a5:a2:9e:30:b2:e9:c3:54:88:6d:
         cf:9e:36:05:43:46:b8:d4:d4:20:dc:a4:46:f5:bc:68:3d:9b:
         90:7e:54:5e:1b:4a:95:9c:fd:d3:bf:93:62:39:d5:a3:c8:ba:
         87:60:3c:29:ba:97:4f:6e:c7:93:41:db:63:fa:00:07:f0:d4:
         a1:dd:b8:77
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUNyb88TEwugt5GzS3HX8KDuo3uZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM2OTEwRjNDMzk5NUQ3Q0NDMDZBREMyRjE1MkZGRDRB
MTY4RjI0QzAeFw0yNjAxMDYxOTE1MTZaFw0yNzAxMDUxOTIwMTZaMDMxMTAvBgNV
BAMTKDkzMDhFREZDNDA3OUI3RjFBRDBBODNCQTdBRkExMjFDNkQ4QzM2MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS56PovMNnR27R9pnlj2+08fCF
02kMpy43LL8Hjhng7NQDE3EUHKfKK/JknoNFhHb2xE/WIw/tA2oqH+lSOVRArow2
am3UqvKFzOmOIlJyA1Yx5IrEjf4nMLA9Noxa08TbUlc50mJl2HaXk8Dw5ajZyn4Y
/IaDoMB0YlE6/LQ1cpVHPeuVYYT38M7SaKz8adfwzHGkU3urM/fKxFFGz/3QvK2o
Bxf5IUUy9hMyh86bNfoR3Gzk/7MRX9uhMJwES8KtyGq4x7e3hs15dYMDCaK19BbV
LpGhA6hAGZCyVfGnbfDm4SxdZ2He0lE95kgcpUcUPdqbUftfo4gUuZZRdDn/AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUkwjt/EB5t/GtCoO6evoSHG2MNiowHwYDVR0j
BBgwFoAUo2kQ88OZXXzMBq3C8VL/1KFo8kwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzM5OUM1MTNCNjNBODczNzI3NUMxMjk3QjM3MDkwNEUw
NDcyMDk5N0ZFN0Y4RDEyNEQ5QjU0N0NDM0VERTdBLzAvQTM2OTEwRjNDMzk5NUQ3
Q0NDMDZBREMyRjE1MkZGRDRBMTY4RjI0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzY5MTBGM0MzOTk1RDdDQ0Mw
NkFEQzJGMTUyRkZENEExNjhGMjRDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTczOTlDNTEzQjYzQTg3MzcyNzVDMTI5N0IzNzA5MDRFMDQ3MjA5OTdG
RTdGOEQxMjREOUI1NDdDQzNFREU3QS8wLzMxMzczMDJlMzgzMzJlMzQyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMxMzAzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlMEMA0GCSqG
SIb3DQEBCwUAA4IBAQAh0Yg9zxf++sdKuGrAcDDmkISGRtRIDAqPanGrHaHEl9Hj
FO8yZ7nIZTV/PEHvevuc4llIyvNgaXATqDmLtMpSyzkwRMjlvX2uC2qcsbYX5Yi5
oWp/QBgGdZ8vIjszr7Awc5hYybVnQ5hpempYkr4pjvTmOL3Vuk04TPKW0Wr5bgEd
Ot+OHR3EqmYhJvdyEWTfvjCTcb7e4HYLkfOEvHg8VD5IyHYlh03fZbX4lEzV2BZZ
sdpdztQkMf6FFqWinjCy6cNUiG3PnjYFQ0a41NQg3KRG9bxoPZuQflReG0qVnP3T
v5NiOdWjyLqHYDwpupdPbseTQdtj+gAH8NSh3bh3
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:15 2026 by rpki-client